diff options
| author | Gerald Combs <gerald@wireshark.org> | 2018-07-01 08:16:47 +0000 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2018-07-01 08:16:52 +0000 |
| commit | f88256c2f31fc116d3b0ade8dbb29eecbc75099c (patch) | |
| tree | 0875343a9b8bcd960c1cc2332aefa36fcf920a46 /docbook | |
| parent | 9d1cea0c18a9c97843ff79a759b60953cd8df107 (diff) | |
[Automatic update for 2018-07-01]
Update manuf, services enterprise numbers, translations, and other items.
Change-Id: I41a23250a0b818b08475ede50792fd9acc37b2ae
Reviewed-on: https://code.wireshark.org/review/28547
Reviewed-by: Gerald Combs <gerald@wireshark.org>
Diffstat (limited to 'docbook')
| -rw-r--r-- | docbook/wsug_src/editcap-h.txt | 22 |
1 files changed, 10 insertions, 12 deletions
diff --git a/docbook/wsug_src/editcap-h.txt b/docbook/wsug_src/editcap-h.txt index bc9fd2b072..2c0351e7f9 100644 --- a/docbook/wsug_src/editcap-h.txt +++ b/docbook/wsug_src/editcap-h.txt @@ -1,4 +1,4 @@ -Editcap (Wireshark) 2.5.0 (v2.5.0rc0-1171-g33c00a67) +Editcap (Wireshark) 2.9.0 (v2.9.0rc0-1126-g9d1cea0c) Edit and/or translate the format of capture files. See https://www.wireshark.org for more information. @@ -25,17 +25,6 @@ Duplicate packet removal: LESS THAN <dup time window> prior to current packet. A <dup time window> is specified in relative seconds (e.g. 0.000001). - -a <framenum>:<comment> Add or replace comment for given frame number - - -I <bytes to ignore> ignore the specified number of bytes at the beginning - of the frame during MD5 hash calculation, unless the - frame is too short, then the full frame is used. - Useful to remove duplicated packets taken on - several routers (different mac addresses for - example). - e.g. -I 26 in case of Ether/IP will ignore - ether(14) and IP header(20 - 4(src ip) - 4(dst ip)). - NOTE: The use of the 'Duplicate packet removal' options with other editcap options except -v may not always work as expected. Specifically the -r, -t or -S options will very likely NOT have the @@ -69,6 +58,15 @@ Packet manipulation: -o <change offset> When used in conjunction with -E, skip some bytes from the beginning of the packet. This allows one to preserve some bytes, in order to have some headers untouched. + -I <bytes to ignore> ignore the specified number of bytes at the beginning + of the frame during MD5 hash calculation, unless the + frame is too short, then the full frame is used. + Useful to remove duplicated packets taken on + several routers (different mac addresses for + example). + e.g. -I 26 in case of Ether/IP will ignore + ether(14) and IP header(20 - 4(src ip) - 4(dst ip)). + -a <framenum>:<comment> Add or replace comment for given frame number Output File(s): -c <packets per file> split the packet output to different files based on |